CVE-2025-68474

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In versions 5.5.1, 5.4.3, 5.3.4, 5.2.6, 5.1.6, and earlier, in the avrcvendormsg function of the ESP-IDF BlueDroid AVRCP stack, the allocated buffer size was validated using AVRCMINCMDLEN 20 bytes. However, the actual fixed...

The vulnerability of the avrc_vendor_msg() function in the avrc_opt.cc module of Android operating systems allows a hacker to escalate their privileges and execute arbitrary code.

The vulnerability of the avrcvendormsg function in the avrcopt.cc module of Android operating systems is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

CVE-2024-49714

A heap-based buffer overflow in the avrc_vendor_msg function of the avrc_opt.cc module in Android operating systems allows an attacker to perform an out-of-bounds write. This vulnerability can lead to an elevation of privilege on a paired device without requiring additional execution privileges o...

CVE-2024-49714

In avrcvendormsg of avrcopt.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-49714

In avrcvendormsg of avrcopt.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-49714

In avrcvendormsg of avrcopt.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...